$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87.cer File: 61309c2c-1304-4196-8032-81ffd78aaa87.cer (raw, json) Hash identifier: /qEevtewG96uFbbZqiSr6dtZMY9bOe6GkPOlCbu9jJI= Subject key identifier: 56:B8:B1:D6:5F:01:65:71:EC:07:CA:93:E6:3A:1F:BC:51:FA:14:1B Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBCC67EF7A6A4B2859C14D1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87/61309c2c-1304-4196-8032-81ffd78aaa87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 13:19:37 +0000 Certificate not after: Sun 06 Feb 2028 13:19:37 +0000 Subordinate resources: AS: 401126 IP: 23.179.120.0/24 IP: 2602:f8dc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:c6:7e:f7:a6:a4:b2:85:9c:14:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 3 13:19:37 2025 GMT Not After : Feb 6 13:19:37 2028 GMT Subject: CN=61309c2c-1304-4196-8032-81ffd78aaa87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1e:dc:80:5e:da:88:70:87:df:29:ef:4d:aa: e1:3f:63:d8:13:fe:65:6a:3a:c6:21:04:f8:fc:30: fb:50:6f:7c:97:9d:5f:a2:3b:bb:fc:0c:91:5b:cd: 27:40:94:26:64:99:3b:1c:bd:4e:d5:8f:72:97:c4: 12:7d:19:b3:f7:ee:ea:54:d9:78:97:4b:8a:72:d9: 2c:d5:c3:57:69:55:65:b1:4b:de:ff:69:bd:b8:c4: 8e:ef:96:e5:58:39:5f:bc:3f:8d:9e:4f:af:ab:df: 7e:21:d8:0d:a1:d3:a4:de:54:21:40:ac:a2:62:67: 75:cf:4d:31:de:54:94:9b:34:4b:76:33:45:51:1c: 0d:74:3a:fc:8f:fe:af:9e:fc:41:a0:fa:ef:db:18: 04:08:5f:5f:18:32:10:28:1f:d4:a4:d1:ff:8e:21: 76:e5:31:ff:2d:75:95:04:56:b6:1a:50:77:a0:14: 6d:b0:40:9b:3c:2b:ba:95:e9:8d:5f:07:8c:89:1a: 2a:e8:68:88:9f:73:18:17:6e:b1:f9:0d:bb:13:f0: dc:01:cc:3f:34:2d:55:4b:17:9f:28:c8:7a:da:9b: 60:09:4c:f9:a0:72:cc:f7:62:c8:70:45:9c:22:95: 08:23:76:ee:af:cf:e5:48:25:f8:70:5a:57:57:db: 53:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B8:B1:D6:5F:01:65:71:EC:07:CA:93:E6:3A:1F:BC:51:FA:14:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87/61309c2c-1304-4196-8032-81ffd78aaa87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.179.120.0/24 IPv6: 2602:f8dc::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401126 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:3b:af:5f:7f:b6:ae:c5:20:ad:0b:06:51:5b:33:19:8c:f8: 1f:be:60:64:85:c0:22:75:46:2c:2f:3e:09:ae:57:ed:b2:a2: cc:c8:a1:46:60:30:a3:cc:00:45:14:2e:e3:70:5d:e9:4e:f3: aa:0e:d5:7f:7f:8b:db:eb:fd:f1:d9:d8:c5:e3:40:2e:07:32: 4d:c9:0d:50:f7:78:c0:5c:c8:61:82:55:ed:60:56:bf:ee:12: ec:cf:98:5a:25:65:c3:c0:4e:e3:08:c2:73:55:e6:35:8b:1f: cf:17:77:b3:0d:d5:55:0e:26:4b:6e:c9:ad:90:d3:d0:74:48: 4e:65:89:2b:58:0d:03:9b:b5:7f:87:63:e7:6c:ed:54:0e:fd: 35:f7:6f:2e:d3:41:77:f8:2c:ab:22:40:69:55:b5:52:fe:14: 6a:3a:af:b3:f2:d0:b1:89:c9:38:09:fb:60:25:58:a6:f1:af: 3e:5f:25:bb:93:95:f3:7e:7a:96:ad:39:14:b3:35:9a:17:69: 35:bd:14:14:23:a8:8c:89:e3:41:5d:4a:ea:c6:8f:6b:1a:df: 4d:f6:95:a3:46:59:87:ca:3c:00:f1:18:ae:a6:c6:c7:c5:42: c9:ea:73:62:6a:5d:07:6c:1e:10:aa:e9:8e:c5:02:85:fe:6a: 4e:36:b6:b0 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEu8xn73pqSyhZwU0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMzEzMTkzN1oXDTI4MDIwNjEzMTkzN1owLzEtMCsGA1UEAxMk NjEzMDljMmMtMTMwNC00MTk2LTgwMzItODFmZmQ3OGFhYTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB7cgF7aiHCH3ynvTarhP2PYE/5lajrGIQT4 /DD7UG98l51foju7/AyRW80nQJQmZJk7HL1O1Y9yl8QSfRmz9+7qVNl4l0uKctks 1cNXaVVlsUve/2m9uMSO75blWDlfvD+Nnk+vq99+IdgNodOk3lQhQKyiYmd1z00x 3lSUmzRLdjNFURwNdDr8j/6vnvxBoPrv2xgECF9fGDIQKB/UpNH/jiF25TH/LXWV BFa2GlB3oBRtsECbPCu6lemNXweMiRoq6GiIn3MYF26x+Q27E/DcAcw/NC1VSxef KMh62ptgCUz5oHLM92LIcEWcIpUII3bur8/lSCX4cFpXV9tTYwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFa4sdZfAWVx7AfKk+Y6H7xR+hQbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82 MTMwOWMyYy0xMzA0LTQxOTYtODAzMi04MWZmZDc4YWFhODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzYxMzA5YzJjLTEzMDQtNDE5Ni04 MDMyLTgxZmZkNzhhYWE4Ny82MTMwOWMyYy0xMzA0LTQxOTYtODAzMi04MWZmZDc4 YWFhODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXs3gwDgQCAAIwCAMGACYC+NwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYe5jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1O69ff7auxSCtCwZRWzMZjPgf vmBkhcAidUYsLz4JrlftsqLMyKFGYDCjzABFFC7jcF3pTvOqDtV/f4vb6/3x2djF 40AuBzJNyQ1Q93jAXMhhglXtYFa/7hLsz5haJWXDwE7jCMJzVeY1ix/PF3ezDdVV DiZLbsmtkNPQdEhOZYkrWA0Dm7V/h2PnbO1UDv01928u00F3+CyrIkBpVbVS/hRq Oq+z8tCxick4CftgJVim8a8+XyW7k5XzfnqWrTkUszWaF2k1vRQUI6iMieNBXUrq xo9rGt9N9pWjRlmHyjwA8RiupsbHxULJ6nNial0HbB4QqumOxQKF/mpONraw -----END CERTIFICATE-----Generated at Tue Nov 4 09:23:32 2025 by rpki-client